This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/3879dd-ef95-45e6-8767-e681ebba4a4a/1/QNkz6CR0ZQxqo-nL8FdNJyhlkuc.mft File: QNkz6CR0ZQxqo-nL8FdNJyhlkuc.mft (raw, json) Hash identifier: PdOtKuo5DGtfDE32xE2M25K/1G0gdFWXtolJPGRLEHU= Subject key identifier: AC:2B:67:82:02:B5:7D:7C:E4:BE:F8:55:9E:0F:38:FB:33:4E:C2:A9 Authority key identifier: 40:D9:33:E8:24:74:65:0C:6A:A3:E9:CB:F0:57:4D:27:28:65:92:E7 Certificate issuer: /CN=40d933e82474650c6aa3e9cbf0574d27286592e7 Certificate serial: 019AF42E6AED193BE91DC5132D372CC32798 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QNkz6CR0ZQxqo-nL8FdNJyhlkuc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/3879dd-ef95-45e6-8767-e681ebba4a4a/1/QNkz6CR0ZQxqo-nL8FdNJyhlkuc.mft Manifest number: 176E Signing time: Sat 06 Dec 2025 15:01:14 +0000 Manifest this update: Sat 06 Dec 2025 15:01:14 +0000 Manifest next update: Sun 07 Dec 2025 15:01:14 +0000 Files and hashes: 1: QNkz6CR0ZQxqo-nL8FdNJyhlkuc.crl (hash: heKm+tmHpok0Rror8XEiIdAAXI7ud7o74bnVi9pAoKA=) 2: ULw_e6rY6wER2z1dGFmp31jEgd0.roa (hash: MY5YBBTJCozx9Da4ab7Dr9d2mlZWfjLXtBL3DR2CzxU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/3879dd-ef95-45e6-8767-e681ebba4a4a/1/QNkz6CR0ZQxqo-nL8FdNJyhlkuc.crl rsync://rpki.ripe.net/repository/DEFAULT/22/3879dd-ef95-45e6-8767-e681ebba4a4a/1/QNkz6CR0ZQxqo-nL8FdNJyhlkuc.mft rsync://rpki.ripe.net/repository/DEFAULT/QNkz6CR0ZQxqo-nL8FdNJyhlkuc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:2e:6a:ed:19:3b:e9:1d:c5:13:2d:37:2c:c3:27:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40d933e82474650c6aa3e9cbf0574d27286592e7 Validity Not Before: Dec 6 15:01:14 2025 GMT Not After : Dec 7 15:01:14 2025 GMT Subject: CN=ac2b678202b57d7ce4bef8559e0f38fb334ec2a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:bf:75:a3:cb:07:4c:67:63:15:66:75:3f:da: 2e:8e:56:fc:2e:86:a1:c1:f1:cc:95:d4:81:69:c4: be:6f:79:12:71:90:49:cd:b3:6d:c3:3d:26:b5:ca: eb:4b:2c:9a:8f:e2:9d:0e:fa:dc:91:8d:f4:1d:3c: 5e:8e:2b:b0:a8:c8:0f:2b:5a:67:73:0a:ea:a7:26: 38:76:2d:4b:8f:c3:4f:01:99:f7:3b:24:10:92:51: 17:39:f5:bb:0f:40:07:b6:4e:83:84:56:35:93:c3: c9:81:23:08:c7:9c:69:24:25:65:fa:2b:a4:84:4e: 85:f3:e0:06:e2:da:57:54:9b:f1:e6:1b:98:6a:ed: a6:b0:13:e1:4e:13:9c:d1:06:e3:01:ce:24:63:b3: 61:68:5b:b0:e5:46:ec:d5:c3:ec:bc:72:fc:5b:fe: f7:4d:51:7c:9e:39:96:a2:0a:ab:20:fa:03:cf:c7: ee:ea:e6:7c:43:f4:40:5a:fc:86:6f:96:c8:a1:d7: db:7e:3f:c6:fb:c8:9c:98:98:de:4a:44:7a:3b:2c: 99:3f:50:67:ca:e9:1f:51:d6:06:51:8b:cb:75:c5: 71:2a:55:92:09:bf:61:aa:f1:3d:0d:59:08:0f:61: db:2a:e9:c3:a3:d9:3e:18:73:51:a4:21:96:37:39: f9:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:2B:67:82:02:B5:7D:7C:E4:BE:F8:55:9E:0F:38:FB:33:4E:C2:A9 X509v3 Authority Key Identifier: keyid:40:D9:33:E8:24:74:65:0C:6A:A3:E9:CB:F0:57:4D:27:28:65:92:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QNkz6CR0ZQxqo-nL8FdNJyhlkuc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/3879dd-ef95-45e6-8767-e681ebba4a4a/1/QNkz6CR0ZQxqo-nL8FdNJyhlkuc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/22/3879dd-ef95-45e6-8767-e681ebba4a4a/1/QNkz6CR0ZQxqo-nL8FdNJyhlkuc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:f8:97:8a:77:5d:fe:af:57:b5:37:d1:66:c7:e5:fd:37:d4: 42:2e:ad:4f:ea:0a:3d:0b:08:5a:03:45:61:b4:71:b6:52:30: d2:bf:f2:7e:74:bb:41:b7:16:6e:4a:2a:2f:60:69:5e:4e:8b: be:47:3a:cd:c1:53:e6:dd:fd:07:68:2d:44:3b:26:e8:f0:d0: 84:6f:42:e0:de:35:79:2a:1e:2d:57:b0:04:df:9a:9e:c0:d1: b7:b1:49:8a:af:4d:e3:68:ae:7b:5f:7d:18:ab:6b:4d:84:b1: b1:71:0f:66:01:02:d6:18:be:be:17:e9:2e:4c:9d:b2:6a:9f: 7b:af:cd:45:69:5f:c3:78:32:0f:41:9b:cc:f4:17:60:d7:fe: 05:a3:ce:41:43:16:19:ba:85:e6:16:e1:e7:76:f1:47:1f:42: f2:c3:25:85:d9:2c:65:89:e0:a1:4b:a8:64:10:5a:22:30:16: a9:58:62:4f:58:3e:62:c5:58:67:c7:eb:97:48:d3:45:1a:a0: 09:6c:a0:5e:a1:c4:5c:3e:f7:aa:91:13:97:13:3c:87:bf:40: c7:f7:4c:4b:a8:03:37:8d:ed:c8:6d:75:bd:11:9a:df:69:48: d2:86:18:89:9a:43:6a:4d:99:88:b1:cb:ef:20:f1:90:1f:78: 5f:36:64:72 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0LmrtGTvpHcUTLTcswyeYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQwZDkzM2U4MjQ3NDY1MGM2YWEzZTljYmYwNTc0ZDI3Mjg2 NTkyZTcwHhcNMjUxMjA2MTUwMTE0WhcNMjUxMjA3MTUwMTE0WjAzMTEwLwYDVQQD EyhhYzJiNjc4MjAyYjU3ZDdjZTRiZWY4NTU5ZTBmMzhmYjMzNGVjMmE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu791o8sHTGdjFWZ1P9oujlb8Loah wfHMldSBacS+b3kScZBJzbNtwz0mtcrrSyyaj+KdDvrckY30HTxejiuwqMgPK1pn cwrqpyY4di1Lj8NPAZn3OyQQklEXOfW7D0AHtk6DhFY1k8PJgSMIx5xpJCVl+iuk hE6F8+AG4tpXVJvx5huYau2msBPhThOc0QbjAc4kY7NhaFuw5Ubs1cPsvHL8W/73 TVF8njmWogqrIPoDz8fu6uZ8Q/RAWvyGb5bIodfbfj/G+8icmJjeSkR6OyyZP1Bn yukfUdYGUYvLdcVxKlWSCb9hqvE9DVkID2HbKunDo9k+GHNRpCGWNzn5rQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKwrZ4ICtX185L74VZ4POPszTsKpMB8GA1UdIwQY MBaAFEDZM+gkdGUMaqPpy/BXTScoZZLnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUU5rejZDUjBaUXhxby1uTDhGZE5KeWhsa3VjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi8zODc5ZGQtZWY5NS00NWU2LTg3Njct ZTY4MWViYmE0YTRhLzEvUU5rejZDUjBaUXhxby1uTDhGZE5KeWhsa3VjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMi8zODc5ZGQtZWY5NS00NWU2LTg3NjctZTY4MWViYmE0YTRh LzEvUU5rejZDUjBaUXhxby1uTDhGZE5KeWhsa3VjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWPiXindd /q9XtTfRZsfl/TfUQi6tT+oKPQsIWgNFYbRxtlIw0r/yfnS7QbcWbkoqL2BpXk6L vkc6zcFT5t39B2gtRDsm6PDQhG9C4N41eSoeLVewBN+ansDRt7FJiq9N42iue199 GKtrTYSxsXEPZgEC1hi+vhfpLkydsmqfe6/NRWlfw3gyD0GbzPQXYNf+BaPOQUMW GbqF5hbh53bxRx9C8sMlhdksZYngoUuoZBBaIjAWqVhiT1g+YsVYZ8frl0jTRRqg CWygXqHEXD73qpETlxM8h79Ax/dMS6gDN43tyG11vRGa32lI0oYYiZpDak2ZiLHL 7yDxkB94XzZkcg== -----END CERTIFICATE-----Generated at Sat Dec 6 18:33:04 2025 by rpki-client